Privacy Policy

1. Who we are

Beaconmon is operated by Haimanot Getu (“we”, “us”, or “our”), trading as Beaconmon. For the purposes of the GDPR and other applicable data protection laws, Haimanot Getu is the data controller for personal data collected through beaconmon.com.

We provide website uptime and performance monitoring services accessible at beaconmon.com. This policy explains what personal data we collect, why we collect it, how we use it, and your rights in relation to it.

2. What data we collect

We collect the following categories of personal data:

• Account data: Email address, name (optional), and hashed password when you create an account.
• Billing data: Payment and subscription information is processed by Freemius, Inc. (our Merchant of Record). We do not store full card numbers; we receive and store only a customer reference, subscription status, and plan tier from Freemius.
• Usage data: Monitor configurations (URLs, check settings), check results, alert channel configurations, and status page settings you create.
• Log data: Server logs including IP addresses, browser user agents, and request timestamps, retained for up to 30 days for security and debugging purposes.
• Cookies: We use a single session cookie to keep you logged in. We do not use advertising or tracking cookies.
• Chrome extension data: If you install the Beaconmon Chrome extension, the extension reads DOM signals (HTML tags and asset URLs) on HTTPS pages you visit to detect Shopify storefronts. This detection happens entirely in your browser and the full content of pages you visit is never transmitted to our servers. Only the bare domain name (e.g. example.com) of a store you explicitly choose to track is sent to Beaconmon. A bearer token is stored in Chrome's local storage to authenticate your account; reconnecting the extension revokes the previous token.

3. Shopify App

If you install Store Intel by Beaconmon from the Shopify App Store, we access your store's product catalog and inventory levels via the Shopify API (read_products and read_inventory scopes). We do not access customer data, order data, financial data, or any Protected Customer Data. The app does not store full Shopify access tokens beyond what is necessary to maintain the authenticated session.

We collect and store the following from your Shopify store:

• Shop domain and store name: to identify your installation and link it to your Beaconmon account.
• Merchant email address: the store owner email provided by Shopify at install, used to associate an existing Beaconmon account or create one silently on your behalf.
• Product catalog and inventory data: product titles, handles, prices, variant availability, and inventory levels, used to power monitoring features and alerts you configure within the app.

We use this data only to operate the monitoring and alerting features you enabled. We do not sell or share your store's product data with other merchants or third parties for marketing purposes.

When you uninstall the app, your Shopify access token is revoked immediately. Remaining store data (shop domain, cached product data) is deleted within 30 days. To request earlier deletion, email privacy@beaconmon.com.

4. How we use your data

We use your personal data only to:

• Provide and operate the monitoring service you signed up for.
• Send you transactional emails (alerts, account notifications, billing receipts). We do not send marketing emails without your explicit opt-in.
• Diagnose and fix technical issues.
• Comply with legal obligations.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

5. Third-party processors

We share data with the following sub-processors, each bound by a data processing agreement:

• Freemius, Inc.: payment processing and subscription management (Merchant of Record). Freemius may be the data controller for billing data in certain jurisdictions.
• Resend: transactional email delivery (alert and account emails).
• Cloudflare: CDN, DDoS protection, and edge caching for status pages.
• Neon: managed PostgreSQL database hosting (your monitor data, check results, and account data are stored here).
• Sentry: error tracking. Error events may include request context but are stripped of payment or full authentication data.
• PostHog: product analytics. When you track a competitor via the Chrome extension or the web app, an event is sent to PostHog containing your anonymised team identifier and the competitor domain. No personal data (name, email, IP) is included in these events.

6. Data retention

• Check result data is retained for up to 365 days and then deleted. Access within the app is limited to your plan's history window (7, 90, or 365 days).
• Account data is retained for as long as your account is active. If you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required by law to retain it longer.
• Server logs are retained for up to 30 days.

7. Your rights

Depending on your location, you may have the right to access, correct, export, or delete your personal data. To exercise any of these rights, email us at privacy@beaconmon.com. We will respond within 30 days.

If you are in the European Economic Area, you have rights under the GDPR including the right to lodge a complaint with your local supervisory authority.

8. Security

We use industry-standard security practices: encrypted connections (TLS), hashed passwords (bcrypt), and access controls that restrict employee access to production data. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.

9. Children

Beaconmon is not directed at children under 16. We do not knowingly collect personal data from children.

10. Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify you by email or by a prominent notice on the site before the changes take effect.

11. Contact

Questions about this policy? Email us at privacy@beaconmon.com.

Data controller: Haimanot Getu, operating as Beaconmon (beaconmon.com).